Account & Settings

Security Settings

Manage emails, social connections, passwords, and active sessions to secure your account.

Your security settings help protect your Firebuzz account with multiple layers of security. Manage email addresses, link social accounts, update passwords, and monitor active sessions all from one page.

Accessing Security Settings

To access your security settings:

  1. Click Settings in the sidebar
  2. Navigate to Account
  3. Select the ProfileSecurityWorkspaces

The Security tab displays four sections on a single scrollable page:

  1. Email Settings - Manage multiple email addresses
  2. Social Connections - Link Google or Facebook accounts
  3. Password Settings - Set or update your password
  4. Device Settings - View and manage active sessions

All security settings are on one page. Scroll down to access each section without switching between tabs.

Email Settings

Manage multiple email addresses for your account. Add backup emails, set your primary email, and verify addresses for account recovery.

Your Email Addresses

The Email Settings section displays all emails linked to your account:

  • Primary Email: Marked with Primary badge
  • Verification Status: Verified or Unverified
  • Remove Option: Delete icon for non-primary emails
  • Set as Primary: Option to make any verified email your primary

Adding an Email Address

To add a new email to your account:

  1. Navigate to SettingsAccountProfileSecurityWorkspaces
  2. Scroll to Email Settings
  3. Click Add Email
  4. Enter the new email address: Email Address:
  5. Click Send Verification
  6. Check your inbox for the verification email
  7. Click the verification link in the email

The new email will appear in your list with an Unverified badge until verified.

Add a backup email address for account recovery. If you lose access to your primary email, you can use a verified backup email to regain access.

Verifying an Email Address

Unverified emails cannot be set as primary or used for account recovery:

  1. Find the unverified email in your list
  2. Click Resend Verification if needed
  3. Open the verification email
  4. Click the verification link
  5. Return to the Security settings page

The email will now show Verified.

Setting a Primary Email

Your primary email is used for:

  • Signing into Firebuzz
  • Receiving important notifications
  • Password reset emails
  • Billing and subscription communications

To change your primary email:

  1. Navigate to the Email Settings section
  2. Find a verified email you want to make primary
  3. Click Set as Primary
  4. Confirm the change

Your new primary email is immediately active for sign-in.

Make sure the email is verified before setting it as primary. You cannot set an unverified email as your primary email.

Removing an Email Address

To remove an email from your account:

  1. Find the email you want to remove (cannot be your primary email)
  2. Click the remove icon
  3. Confirm the removal

You cannot remove your primary email. Set a different email as primary first, then remove the old one.

Social Connections

Link your Google or Facebook account to enable quick sign-in without entering your password. Social connections are managed through Clerk authentication.

Available Social Providers

Google

Sign in with your Google account for faster authentication.

Facebook

Use your Facebook account to log into Firebuzz.

Linking a Social Account

To connect a Google or Facebook account:

  1. Navigate to SettingsAccountProfileSecurityWorkspaces
  2. Scroll to Social Connections
  3. Find the provider you want to link
  4. Click Connect
  5. Authorize Firebuzz in the popup window
  6. Complete the authentication flow

The account will now show as Connected.

Social connections allow you to sign in without a password. You can link multiple social accounts to your Firebuzz account for flexibility.

Sign In with Social Accounts

Once connected, you can use social sign-in:

  1. Go to the Firebuzz sign-in page
  2. Click Sign in with Google or Sign in with Facebook
  3. Authorize access (if prompted)
  4. You're signed in without entering a password

Unlinking a Social Account

To disconnect a social account:

  1. Navigate to Social Connections in the Security tab
  2. Find the connected account
  3. Click Disconnect
  4. Confirm the disconnection

Make sure you have another sign-in method (email/password or another social account) before disconnecting. You need at least one way to access your account.

Password Settings

Set or update your account password for traditional email and password authentication.

Password Status

The Password Settings section shows:

  • Password Set: Active if you have a password
  • No Password: Not Set if signing in with social only
  • Last Changed: Date of your last password update

Setting Your First Password

If you signed up with Google or Facebook, you may not have a password:

  1. Navigate to SettingsAccountProfileSecurityWorkspaces
  2. Scroll to Password Settings
  3. Click Set Password
  4. Enter a new strong password: New Password:
  5. Confirm the password: Confirm Password:
  6. Click Save Password

You can now sign in with your email and password.

Updating Your Password

To change your existing password:

  1. Navigate to Password Settings in the Security tab
  2. Click Update Password
  3. Enter your current password: Current Password:
  4. Enter your new password: New Password:
  5. Confirm the new password: Confirm New Password:
  6. Click Update Password

Your password is updated immediately.

Use a strong, unique password with at least 8 characters, including uppercase letters, lowercase letters, numbers, and special characters.

Forgot Password

If you forgot your password:

  1. Go to the Firebuzz sign-in page
  2. Click Forgot Password
  3. Enter your email address
  4. Check your inbox for the reset email
  5. Click the reset link
  6. Enter a new password
  7. Sign in with your new password

Password reset emails are sent to your primary email address. If you don't receive the email, check your spam folder or add a backup email address for recovery.

Device Settings (Active Sessions)

Monitor all devices signed into your account and revoke access remotely for security.

Session Information

The Device Settings section displays all active sessions with details:

  • Device Type: Desktop or Mobile
  • Browser: Chrome, Safari, Firefox, etc.
  • Operating System: Windows, macOS, iOS, Android, Linux
  • IP Address: Location identifier
  • Location: City and country (approximate)
  • Last Active: Timestamp of most recent activity
  • Current Session: This Device for your active session

Viewing Active Sessions

To see all devices signed into your account:

  1. Navigate to SettingsAccountProfileSecurityWorkspaces
  2. Scroll to Device Settings
  3. Review the list of active sessions

Each session shows when it was last used and where it's located.

Understanding Session Details

Device Icons:

  • Desktop/Laptop computer
  • Mobile phone or tablet

Location Information:

  • Approximate location based on IP address
  • May show ISP location, not exact physical location
  • VPNs may show different locations

Last Active:

  • Timestamp shows when the session was last used
  • Sessions auto-expire after 30 days of inactivity

The session marked This Device is your current browser. You cannot revoke your active session from this page.

Revoking a Session

To sign out a device remotely:

  1. Navigate to Device Settings in the Security tab
  2. Find the session you want to revoke
  3. Click Revoke or the icon
  4. Confirm the revocation

The device is immediately signed out and must sign in again to access your account.

If you see a session you don't recognize, revoke it immediately and change your password. This could indicate unauthorized access to your account.

Revoking All Sessions

To sign out all devices at once:

  1. Navigate to Device Settings
  2. Click Revoke All Sessions
  3. Confirm the action

All devices except your current browser are signed out immediately.

Use "Revoke All Sessions" if you suspect your account has been compromised or if you want to force all devices to sign in again with updated credentials.

Session Security Best Practices

  • Review Regularly: Check active sessions monthly for unfamiliar devices
  • Revoke Unknown Sessions: Sign out any sessions you don't recognize
  • Use Strong Passwords: Prevent unauthorized access with secure passwords
  • Sign Out on Shared Devices: Always sign out when using public computers
  • Enable 2FA: Add an extra layer of security (configured during sign-in via Clerk)

FAQ